Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb74555f-feef-44cb-bd3c-f34d37c3ddab.roa
File:                     eb74555f-feef-44cb-bd3c-f34d37c3ddab.roa (raw, json)
Hash identifier:          vVvHk9xhKm+IweqQJ4jMWFuUU2UgH3tfWnJ2Zl7WuVA=
Subject key identifier:   0C:BE:8D:7A:75:6F:9E:DC:9A:C0:07:72:76:DF:AC:BF:B9:5D:8F:AE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6255C0FE9C7707D03AC3E79722ACD029EA71E189
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb74555f-feef-44cb-bd3c-f34d37c3ddab.roa
Signing time:             Tue 20 Dec 2022 00:00:00 +0000
ROA not before:           Tue 20 Dec 2022 00:00:00 +0000
ROA not after:            Fri 23 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:55:c0:fe:9c:77:07:d0:3a:c3:e7:97:22:ac:d0:29:ea:71:e1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 20 00:00:00 2022 GMT
            Not After : Dec 23 23:59:59 2022 GMT
        Subject: serialNumber=568cab058d07a7b68b5661896c4b599d0c12d93046e83921e2b2874fbd5791a3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:4a:b6:b0:e1:ea:d5:a1:c9:65:c9:0f:d8:
                    c2:1d:54:d5:92:96:e6:b5:cc:31:69:97:ea:fa:ed:
                    73:ea:a8:3e:fd:15:2b:bf:5d:a5:fb:c0:ea:81:bf:
                    c6:1b:89:a2:28:f7:ce:18:a8:42:2e:32:e6:e0:49:
                    04:ae:f2:5d:8d:dd:45:7a:d0:49:8a:87:89:86:5d:
                    f8:27:bb:be:40:1b:e0:d0:33:38:f8:66:2f:1a:e9:
                    7f:04:f6:68:f0:df:f6:da:0a:78:7c:cb:f1:6e:06:
                    82:c6:02:3b:77:94:e2:da:02:e9:4f:cd:c9:c0:c5:
                    cd:5e:e4:78:a6:27:db:12:fe:0b:a5:42:9b:f5:74:
                    ef:30:d6:48:a0:7d:ab:85:20:c9:22:8b:50:4e:c0:
                    92:d1:23:61:68:6e:9f:71:f3:6e:8b:e0:43:74:d1:
                    ba:85:d9:75:96:4b:8f:78:06:f5:e4:be:94:a8:df:
                    34:2c:81:c2:94:3e:b8:9c:91:5c:4a:b9:8f:a0:38:
                    fd:a4:e6:4a:f5:ce:c9:b0:4c:5b:67:61:76:6f:38:
                    fe:b9:57:eb:bf:35:67:44:e0:5b:40:17:dc:ac:d8:
                    8d:bb:e0:f5:46:fa:ac:0b:3a:4e:a4:2e:30:20:07:
                    2c:97:7b:e5:61:40:5c:73:a2:1e:ad:a1:81:2e:4e:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:8D:7A:75:6F:9E:DC:9A:C0:07:72:76:DF:AC:BF:B9:5D:8F:AE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/eb74555f-feef-44cb-bd3c-f34d37c3ddab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:6b:fb:7a:ad:56:76:ab:54:c8:d2:2e:41:e6:b0:24:2f:c9:
         3f:55:5e:17:33:d7:4c:85:48:05:9a:04:82:b8:e0:f5:98:f7:
         61:86:8e:a5:4d:78:9d:d8:42:e4:20:1c:e1:21:9f:5a:f4:09:
         31:53:4e:32:26:9c:a9:39:83:bd:94:06:f4:51:99:df:ac:e7:
         03:0a:36:ff:0a:10:02:5a:48:d3:c8:da:32:88:90:68:69:59:
         c5:d8:5e:6a:c1:e0:9d:31:06:9c:5c:a4:e9:42:19:a0:66:b5:
         91:99:0c:e1:60:fd:96:24:92:58:4d:e5:19:d1:97:ef:50:03:
         11:c6:0a:f7:bc:bd:18:88:6d:55:e2:99:06:61:85:53:f7:2c:
         12:9f:6e:c7:c0:0c:68:ea:a9:b4:34:af:c5:70:33:b8:f1:1d:
         29:3e:8a:2c:b2:bf:20:70:f7:ea:37:b2:aa:ee:fe:3f:18:1c:
         b9:5b:76:25:d7:d7:51:3c:83:13:f2:83:48:05:6e:6b:d0:44:
         fb:01:71:84:15:02:47:5c:c5:7b:2c:57:a9:ae:4f:7e:7d:d2:
         0d:8e:be:ab:1b:ac:c6:ec:84:aa:62:52:b1:87:59:95:2d:97:
         db:95:fe:58:c0:8d:31:d2:24:c4:b9:20:a2:47:f7:15:bf:6d:
         61:2d:d0:c6
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUYlXA/px3B9A6w+eXIqzQKepx4YkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjIwMDAwMDAwWhcNMjIxMjIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNANTY4Y2FiMDU4ZDA3YTdiNjhiNTY2MTg5NmM0YjU5OWQw
YzEyZDkzMDQ2ZTgzOTIxZTJiMjg3NGZiZDU3OTFhMzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5fSraw4erVocllyQ/Ywh1U1ZKW5rXMMWmX6vrtc+qoPv0VK79d
pfvA6oG/xhuJoij3zhioQi4y5uBJBK7yXY3dRXrQSYqHiYZd+Ce7vkAb4NAzOPhm
LxrpfwT2aPDf9toKeHzL8W4GgsYCO3eU4toC6U/NycDFzV7keKYn2xL+C6VCm/V0
7zDWSKB9q4UgySKLUE7AktEjYWhun3HzbovgQ3TRuoXZdZZLj3gG9eS+lKjfNCyB
wpQ+uJyRXEq5j6A4/aTmSvXOybBMW2dhdm84/rlX6781Z0TgW0AX3KzYjbvg9Ub6
rAs6TqQuMCAHLJd75WFAXHOiHq2hgS5OnE8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQMvo16dW+e3JrAB3J236y/uV2PrjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZWI3NDU1NWYtZmVlZi00NGNiLWJkM2MtZjM0ZDM3YzNkZGFiLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFNr+3qtVnarVMjS
LkHmsCQvyT9VXhcz10yFSAWaBIK44PWY92GGjqVNeJ3YQuQgHOEhn1r0CTFTTjIm
nKk5g72UBvRRmd+s5wMKNv8KEAJaSNPI2jKIkGhpWcXYXmrB4J0xBpxcpOlCGaBm
tZGZDOFg/ZYkklhN5RnRl+9QAxHGCve8vRiIbVXimQZhhVP3LBKfbsfADGjqqbQ0
r8VwM7jxHSk+iiyyvyBw9+o3sqru/j8YHLlbdiXX11E8gxPyg0gFbmvQRPsBcYQV
AkdcxXssV6muT3590g2OvqsbrMbshKpiUrGHWZUtl9uV/ljAjTHSJMS5IKJH9xW/
bWEt0MY=
-----END CERTIFICATE-----